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SECOND PRELIMINARY AMENDMENT 



Assistant Commissioner for Patents 
Washington, D.C. 20231 
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SIR-. 

Prior to examination of the above-identified application please amend the 
application as follows: 

In the Specification : 

Page 1, before line 6, the title beginning with " FIELD OF THE INVENTION ", insert the 
following title and paragraph: 

- PRIORITY CLAIM 

This is a national stage of PCT application No. PCT/EPOO/03478, filed on April 17, 2000, 

and of PCT Application No. PCT/EP99/06759, filed on September 13, 1999. Priority is claimed 
on both of these applications.— 
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REMARKS 

This preliminary amendment is presented to complete the claim for priority. Early 
examination and favorable consideration of the above -identified application is earnestly solicited. 

Any additional fees or charges required at this time in connection with the 
application may be charged to our Patent and Trademark Office Deposit Account No. 03-2412. 

Respectfully submitted, 

COHEN, PONTANI, LIEBERMAN & PAVANE 




Michael C. Stuart 

Reg. No. 35,698 

551 Fifth Avenue, Suite 1210 

New York, N.Y. 10176 

(212) 687-2770 



12 June 2002 
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Attorney Docket # 4925-213PUS 
IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

In re National Phase PCT Application of 

Martin BERGENWALL et al. 

International Appln. No.: PCT/EPOO/03478 

International Filing Date: 17 April 2000 

For: Advance Service Architecture For Next] 
Generation Network Services and Intelligent! 
Data Network Router 

PRF.T JMINARY AMENDMENT 

Assistant Commissioner for Patents 
Washington, D.C. 20231 
BOX PCT 

SIR: 

Prior to examination of the above-identified application please amend the 
application as follows: 
IN THE SPECIFICATION : 

Page 17, line 1, delete " CLAIMS: " and insert therefor --What is claimed is:-. 

IN THE CLAIMS (As amended in the Response to Written O pinion dated December 6, 2001): 
Please amend 11 to read as follows: 

11. A data network system in which an apparatus according to claim 1 is employed. 
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Add the following new claims: 

12. A data network system in which an apparatus according to claim 2 is employed. 

13. A data network system in which an apparatus according to claim 3 is employed. 

14. A data network system in which an apparatus according to claim 4 is employed. 

15. A data network system in which an apparatus according to claim 5 is employed. 
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By Express Mail # EL489597526US • Febmary 28, 2002 
REMARKS 

This preliminary amendment is presented to place the application in proper form 
for examination and to eliminate multiple dependency from the present claims. No new matter 
has been added. Early examination and favorable consideration of the above-identified application 
is earnestly solicited . 

Attached hereto is a mark-up version of the changes made to the specification and 
claims by the current amendment. The attached page is captioned "Version with markings to 
show changes made ". 

Any additional fees or charges required at this time in connection with the 
application may be charged to our Patent and Trademark Office Deposit Account No. 03-2412. 

Respectfully submitted, 

COHEN, PONTANI, LIEBERMAN & PA VANE 




Michael C. Stuart 

Reg. No. 35,698 

551 Fifth Avenue, Suite 1210 

New York, N.Y. 10176 

(212) 687-2770 



28 February 2002 
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AMENDMENTS TO THE SPECIFICATION AND CLAIMS SHOWING CHANGES 



In the Claims: 

11. A data network system in which an apparatus according to claim 1 [any one of 
claims 1 to 5] is employed. 
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TITLE OF THE INVENTION 



Advanced service architecture for next generation network 
services and intelligent data network router. 



FIELD OF THE INVENTION 



The present invention relates to packet data transmission 
between mobile networks supporting Internet Protocol (IP) 
like the General Packet Radio Service (GPRS) network and data 
networks like the Internet, and in particular to a method and 
an apparatus for receiving and routing data packets in a data 
network. Moreover, the present invention relates to a method 
and an apparatus for receiving data packets and providing 
services for the received data packets in a data network. 



BACKGROUND OF THE INVENTION 



Data or packet-switched networks like the Internet comprise 
routers for routing data packets in the data network. In a 
conventional router, routing of data packets is affected by a 
classifier for detecting incoming data packets. The 
conventional Internet routers comprise semi-static routing 
tables for routing the data packets, the routing tables being 
updated only via separate management procedures or. via dialog 
between routers using special routing protocols. 



However, with conventional routers several problems arise. In 
case of new routers propagating with conventional routing 
protocols, propagation of data packets in the network is slow 
and a dynamic update of routers is not easy, since all 
routers must know the handling of all packets and if the 
handling for one user changes all routing tables in all 
routers must be updated. Consequently, the routing tables of 
conventional routers are getting large. If every user wants 
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his own packet handling the routing tables grow too much for 
the routers. 

Moreover, similar problems arise with a conventional service 
5 model in a packet data environment. The conventional service 
model consists of a service trigger and a service logic which 
may be located in a router. Such model does not provide the 
flexibility required by the advanced services in the packet 
data domain. 

10 

SUMMARY OF THE INVENTION 

It is an object of the present invention to improve routing 
possibilities by providing dynamically and per user 
15 configurable routing in a data network as well as a dynamic 
and flexible service architecture. 



According to a first aspect of the present invention, there 
is provided an apparatus for receiving a plurality of data 

20 packets and for routing the data packets in a data network. 
This apparatus comprises storing means for storing a pre- 
defined list of rules for detecting special data packets, 
detecting means for detecting special data packets in the 
received plurality of data packets on the basis of the pre- 

25 defined list of rules stored in the storing means, and 

routing means for requesting instructions for the special 
data packets detected by the detecting means and for routing 
the special data packets in accordance with instructions 
received on request, 

30 

Furthermore, according to the first aspect of the present 
invention, there is provided a method for receiving a 
plurality of data packets and for routing the data packets i 
a data network. According to this method, a pre-defined list 
35 of rules for detecting special data packets is stored, 
special data packets in the received plurality of data 
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packets are detected on the basis of the stored pre-defined 
list of rules, and instructions for the detected special data 
packets are requested and the special data packets are routed 
in accordance with instructions received on request. 

Furthermore, there is provided a data network system in which 
the apparatus according to the first aspect of the present 
invention is employed. 

The apparatus according to the first aspect of the present 
invention further comprises an internal entity. Detected 
special data packets are notified to the internal entity by 
the routing means which requests instructions for the special 
data packets therefrom. 

Alternatively, the routing means notifies an external entity 
of the detected special data packets and requests 
instructions for the special data packets therefrom. 

According to the present invention, routing in accordance 
with instructions received on request also includes the 
"normal routing" possibility where a command from the 
external or internal entity states that no special routing is 
necessary, for example when only statistics and information 
is to be collected but no special routing is required. 

According to the present invention, the original rules that 
indicate which packets are special packets and need special 
handling are stored in the storing means by the external 
entity. 

Moreover, the rules stored in the storing means as well as 
the instructions stored in the internal entity can be 
dynamically determined and updated in real-time in response 
to events, which are detected by the detecting means and 
reported by the routing means to the external entity. Thus, 
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the content of the storing means and the internal entity can 
be changed "on the fly", i.e. during active operations. The 
internal entity may also update, add or remove some rules. 

5 For example, the external entity may store some rules to 
detect special packets. When such a packet arrives in the 
router the external or internal entity may modify the rules, 
e.g. remove the specific rule if only the first matching 
packet was of interest. 

10 

In routing the special data packets, the routing means is 
able to modify the special data packets in accordance with 
the received instructions. For example, the routing means can 
modify the content of the data packets, e.g. the packet 
15 headers, it can duplicate data packets or control dropping of 
data packets. 

Moreover, according to the present invention, the routing 
means is able to communicate with an external charging entity 
20 for charging the routing of the special data packets. For 
example, the routing means can collect charging information 
from the charging entity and send charging information to the 
charging entity. In this way, the special handling of data 
packets can be charged. 

25 

For example, the detection of special packets can be based on 
any data within the special packet including but not limited 
to the source or destination IP address, TCP/UDP 
(Transmission Control Protocol/User Datagram Protocol) port 
30 numbers or other IP/UDP/TCP header fields. In other words, 
the pre-defined list of rules for detecting special packets 
can include such packet identification marks. 

According to a second aspect of the present invention, there 
35 is provided an apparatus for receiving a plurality of. data 
packets and for providing services for the data packets in a 
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data network. This apparatus comprises service deciding means 
for deciding services to be executed for the received 
plurality of data packets, and service executing means 
launched by the service deciding means for a decided service. 
5 The service executing means executes the decided service for 
the received data packets. Control means are activated when 
the service executing means are launched, and control the 
service deciding means and the service executing means. 

10 In addition, according to the second aspect, there is 

provided a method of receiving a plurality of data packets 
and providing services for the data packets in a data 
network. In this method, services to be executed for the 
received plurality of data packets are decided and a service 

15 decided for the received data packets is launched. Control 
means are activated for the decided service, and the decided 
service is executed, wherein the control means control the 
deciding of services and the execution of decided services. 

20 Finally, according to the present invention, there is 
provided a data network system in which an apparatus 
according to the second aspect is employed. 

The apparatus according to the second aspect further 
25 comprises a database for storing service deciding information 
which can be read by the service deciding means from the 
database , 

Furthermore, the apparatus comprises service data storing 
30 means for storing service specific data that is used by the 
service executing means. The service specific data comprises 
the data to run a specific service. For example, the service 
specific data for the premium rate service is the destination 
address and tariff. 



35 
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The service specific data is not part of the service 
executing means. For example, in case an advertisement adding 
service is launched, the service deciding means know when to 
insert the advertisements, the service executing means know 
5 how to insert the advertisements and the service specific 

data contains the actual advertisements. The service specific 
data may be static or dynamic. For example, it may be dynamic 
for an advertisement service using location dependent 
advertisements . 

10 

The control means is arranged to access user specific data 
and to supply the user specific data to the service executing 
means. The user specific data comprises user preferences 
regarding a specific service. For example, the user specific 
15 data can contain user preferences regarding advertisement 

selection or packet filtering options in a firewall service. 

When a service is launched, the corresponding control means 
is also activated. Now, the service executing means is able 
20 to contact the control means during its execution. For 
example, in case the service executing means needs user 
interaction, the control means is able to ask the user and 
pass the answer to the service executing means. 

25 

In addition, the control means is arranged to create new 
deciding information for the service deciding means. The 
control means can create new deciding information for a 
current service, it can delete deciding information or it can 
30 activate a totally new service. Thus, new deciding 

information for the service deciding means, i.e. triggers, 
can be created on the fly and added to an active service by 
the control means. 

35 In a packet data environment, the service executing means may 
be located in the router, while the control means may be 
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located in the Service Control Point (SCP) . The router may 
route the data packets received by the service deciding means 
in accordance with the services executed on the data packets 
by the service executing means. 

5 

According to an embodiment of the second aspect of the 
present invention, the service deciding means are called 
service trigger (s), the service executing means are called 
service logic and the control means are called event handler. 
0 According to Intelligent Network (IN) functional entities, 
the functions of the service trigger may be implemented in a 
Service Switching Function (SSF) , the service logic may be 
represented by a Service Logic Program (SLP) and the 
functionality of the event handler may be performed in a 

15 Service Management Point (SMP) and a Specialized Resource 
Function (SRF) , in order to perform message based user 
interaction according to the Wireless Application Protocol 
(WAP) or Unstructured Supplementary Service Data (USSD) . The 
service specific data and user specific data may be stored in 

20 an SCP database or Service Data Function (SDF) database. 

With the special packet handling according to the present 
invention, it is enough for the router to know that some kind 
of special handling is needed for special packets. In 
25 practice, this means that part of the routing tables can be 
located in an external entity from which the router requests 
instructions when needed. 

Moreover, with the handling of special packets it is easy to 
30 manage scenarios that involve more than one router. For 

example, a tunnel can dynamically be created from one router 
to another through special packet handling rules and with the 
help of an external entity connected to both routers involved 
in the tunnel. Different external entities may also be 
35 connected to each other. On the other hand, one router may be 
connected to different external entities. 
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According to the present invention, more intelligence is 
given to a data network router, enabling implementation of 
more versatile and dynamic services for users. 

5 

In this context, reliable and fast delivery of high priority 
data packets can be guaranteed. That is, according to the 
present invention, the delay problem in using IP for real- 
time applications can be reduced or even eliminated. 

10 

Moreover, according to the present invention, a service 
architecture is presented, which uses techniques such as 
event handler interaction, trigger updating and service or 
user specific data updating, to control and execute services 
15 in a more dynamic way. 

Thus, according to the presented service architecture, the 
implementation of data services with advanced features for 
data networks is facilitated. 

20 

In the following the present invention will be described by 
way of preferred embodiments thereof with reference to the 
accompanying drawings - 

25 BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 shows a schematic block diagram of the basic 
components of a router according to a first embodiment of the 
present invention; 

30 

Fig. 2 shows a flowchart of the basic steps of a method 
according to the first embodiment of the present inventions- 
Fig. 3 shows a schematic block diagram of the basic 
35 components of a service architecture according to a second 
embodiment of the present invention; and 
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Fig. 4 shows a flowchart of the basic steps of a method 
according to the second embodiment of the present invention. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

Fig. 1 shows a schematic block diagram of a router in a data 
network like the Internet according to a first embodiment of 
the present invention. The router 1 comprises storing means 
11, detecting means 12, routing means 13 and an internal 
entity 14. 

The detecting means 12 receives data packets from a 
subscriber of a mobile network supporting Internet Protocol 
like the GPRS network, or data packets which are originated 
in the data network. In receiving the data packets, the 
detecting means 12 checks these packets on special packets 
requiring special handling by the routing means 13, by 
referring to a pre-defined list of rules for detecting 
special packets, that is stored in the storing means 11. 

When the detecting means 12 detects a special packet, it 
informs the* routing means 13 and forwards the special packet 
to it. Subsequently, the routing means 13 notifies the 
detection of a special packet to the internal entity 14 or an 
external entity 2, requesting instructions for handling the 
special packet. Having received the requested instructions, 
the routing means 13 handles the special data packets in 
accordance with these instructions, for example modifies the 
packet and outputs or routes it accordingly. 

The routing means 13 also communicates with a charging entity 
3 for providing charging for some special handling of 
packets. The charging entity 3 is in a way just another 
external entity receiving charging related events from the 
router 1. 
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The contents of the storing means 11 and the internal entity 
14 can be updated dynamically in real-time by the external 
entity 2 in response to events detected by the detecting 
5 means 12 and reported to the external entity 2 by the routing 
means 13. 

A method for receiving and routing data packets according to 
the first embodiment of the present invention will be 
10 described with reference to Fig. 2. 

In step SI in Fig. 2, rules for detecting special data 
packets are stored in alist in the storing means 11. In step 
32, data packets are received and it is checked in step S3, 

15 whether a received data packet is a special data packet, by 
referring to the stored rules. If a special data packet is 
detected in step S3, instructions for handling the special 
packet are requested in step S4 . After having received the 
requested instructions, the special packet is handled 

20 accordingly in step S5. 

On the other hand, in case no special data packet is detected 
in step S3, the "normal" data packet is routed according to a 
routing table (not shown in Fig. 1) by the routing means 13 
25 (step S6) , the routing table being provided in the router 1. 

Next, a second embodiment of the present invention will be 
described with reference to Figs. 3 and 4. 

30 Fig. 3 shows a service architecture which is suitable for 

next generation services, in particular packet data services. 
As shown in Fig. 3, a service trigger 42 receives data 
packets. The service trigger 42 then decides whether to 
launch a service logic 43 or not. In case the service trigger 

35 42 launches the service logic 43, the service logic 43 

executes the service decided by the service trigger 42. The 
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service trigger 42 reads trigger information from a database 
41. 

When the service logic 43 is launched by the service trigger 
5 42, a corresponding event handier 5 is also activated. The 
service logic 4 3 is able to contact the event handler during 
its execution. In case the service logic 43 needs user 
interaction, the event handler 5 is able to ask the user and 
pass the answer to the service logic 43, The event handler 5 

10 can create new triggers or trigger information for the 

current service executed in the service logic 43, it can 
delete a trigger or it can activate a totally new service. In 
other words, new triggers or trigger information can be 
created "on the fly" and added to an active service by the 

15 event handler 5, In addition, the event handler 5 is able to 
access user specific data 6 containing user preferences 
regarding a specific service. 

The service logic 43 accesses service specific data 44 which 
20 comprises data to run a specific service, for example 
destination address and tariff data for a premium rate 
service. The service specific data 44 is not part of the 
actual logic. 

25 In an IN packet data environment, the service logic 43 may be 
located in a router, and the event handler may be located in 
an SCP (Service Control Point). For example, in case packet 
data is sent via an SSP (Service Switching Point) to the 
service trigger 42, the service trigger 42 checks whether to 

30 send a message to the SCP. If the service trigger 42 sends 
the message, this message is received by a dialog handler in 
the SCP- The dialog handler passes the message to the event 
handler 5 which may ask the user whether a service for the 
packet data, which is to be executed in the service logic 4 3 

35 should be activated* The result is passed to the service 

logic 43. In case the user decides to activate the service. 
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the SCP allows the SSP to continue the sending of packet 
data . 

Fig. 4 shows a flowchart illustrating the basic steps of the 
5 method of receiving data packets and providing services for 
the data packets according to the present invention. In step 
S51, the service trigger 42 receives data packets, for 
example from an SSP. In step S52, the service trigger 42 
decides whether a service is to be executed for the received 
10 data packets. 

In case the service trigger 42 decides in step S53 on the 
basis of the trigger information in the database 41 that no 
service is required for the received data packets the process 

15 is terminated. In contrast thereto, in case a service is 
required, the process goes to step 554 where the service 
logic 43 is launched for the service to be executed. After 
that, in step 855, the event handler 5 corresponding to the 
service logic 43 is activated. In this context, the service 

20 trigger 42 may contact the event handler 5 as mentioned 

above, which may ask the user whether the decided service 
should be activated. In case the decided service should be 
activated, the service is executed by the service logic 43 in 
step 856, and then the process is terminated. 

25 

The data packets for which a service has been executed by the 
service logic 43 can be routed in accordance with this 
service. Hence, the above-described service architecture 
basically corresponds to the arrangement of the router 1 as 
30 shown in Fig. 1- In other words, the service trigger 42, the 
service logic 43 and the event handler 5 respectively provide 
similar functions as the detecting means 12, the routing 
means 13 and the external entity 2 according to Fig. 1. 



35 



In 
to 



order to activate a service 
the present invention it is 



for a specific user according 
required to get appropriate 
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service trigger (s), service logic and event handler. The 
choice of the appropriate event handler may for example 
depend on what kind of terminal type is used by the user, 
e.g. GSM (Global System for Mobile communications), WAP 
(Wireless Application Protocol) or GPRS (General Packet Radio 
Service), if user interaction is required. In a group service 
there can also exist different event handlers with different 
access rights for the group members. The group owner can have 
a more powerful event handler than other group members, i.e. 
the owner's event handler can be allowed to modify the 
triggers for the service while others are not. A further step 
in activating a service is to load any service specific data 
that is needed statically. Dynamic service specific data is 
loaded by the service logic. The final step is to get the 
user specific data for the service. 

In the following, a first application example of the present 
invention relating to the delay problem in using IP for real- 
time applications will be described. 

A rule for detecting special packets may be the determination 
of the priority of a packet. According to the. first 
application example, the priority of a data packet can be 
determined by comparing the destination number corresponding 
to E.164 or the IP address of the received packet with the 
numbers or addresses stored in connection with the 
corresponding rule in the storing means 11. For example, when 
the destination number or IP address of the packet is listed 
in the corresponding rule, the packet is a special data 
packet having high priority. The priority of a data packet 
can also be detected by checking the content of the packet, 
e.g. the protocol header, as to whether this content is 
listed in the corresponding rule. 

In case a special data packet, i.e. a packet having high 
priority such as an emergency call, is detected by the 
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detecting means 12, the routing means 13 is informed and 
notifies the detection to the internal or external entity and 
requests instructions for handling the special data packet. 
Thereupon, the internal or external entity informs the 
routing means 13 that the delivery of the special packet is 
to be prioritized, which then is carried out by the routing 
means 13. 

With this first application example of the present invention, 
reliable and fast delivery of high priority data packets can 
be guaranteed. That is, according to the present invention, 
the delay problem in using IP for real--time applications can 
be reduced or even eliminated. 

Next, a second application example of the present invention 
relating to family or group service for data networks will be 
described. 

The purpose of the family service is to provide a convenient 
method to define a user group and various properties for the 
group members. The service is targeted for families or small 
companies. The context of the service is mobile networks 
supporting Internet Protocol, such as GPRS. 

As the use of data services gets more popular, the user group 
concept is a convenient way to add value to small companies 
or families. A group consists of a set of predefined users, 
recognized by SIM (Subscriber Identity Module) cards or 
passwords or the like. For example, the predefined users can 
be the members of a particular family. Each group and every 
member of the respective groups has properties that can be 
used to restrict or allow different operations. For example, 
parents might want to restrict the use of WAP (Wireless 
Application Part) services during school hours, or only allow 
access to pre-defined content sites. The group can have 
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different properties for different users or a single property 
can be applied to all members of the group. 

According to the second application example, the rule is to 

* 

5 determine data packets belonging to members of a group. For 
this purpose, a list of groups and for each group a list of 
current members is provided in the storing means 11. In other 
words, in a corresponding rule in the list of rules stored in 
the storing means 11, group IP addresses and member IP 

0 addresses are listed. 

As mentioned above, each group and each member of the group 
can have a set of properties. An owner like the family head 
paying the phone bill is defined for each group. The owner is 
15 allowed to modify the properties of the group members. A 

group can have multiple owners. The group member properties 
define the access rights for the members. Examples for 
properties are allowed IP addresses, allowed access times, 
allowed maximum access times, and the like. 

20 

According to GPRS, the above-mentioned properties can be 
defined in the GGSN (Gateway GPRS Support Node) representing 
the external entity according to Fig. 1. The GGSN is also 
able to supply the group IP addresses and member IP addresses 
25 to the storing means 11. 

For example, when the detecting means 12 detects that a 
packet is to be transmitted to a group member by comparing 
the destination IP address of the packet with the address 

30 listed in the corresponding rule stored in the storing means 
11, it informs the routing means 13 which notifies the 
detected packet to the GGSN and requests instructions from 
the GGSN for handling the detected special packet. The GGSN 
may determine upon this request that the special packet was 

35 originated from an unallowed IP address or at an unallowed 
access time or that the maximum access time has been 
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exceeded, and instructs the routing means 13 to drop the 
packet. 

Alternatively, packets coming from certain group members, 
i.e. packets having a certain source IP address, can be 
dropped by the routing means 13 in accordance with 
instructions received from the GGSN . 

Hence, according to the second application example of the 
present invention, a censoring function is implemented in the 
router 1 simply by adding a rule for detecting special 
packets. That is, according to the present invention, the 
implementation of family or group services for data networks 
is facilitated. 

While the invention has been described with reference to 
preferred embodiments, the description is illustrative of the 
invention and is not to be construed as limiting the 
invention. Various modifications and applications may occur 
to those skilled in the art without departing from the true 
spirit and scope of the invention as defined by the appended 
claims . 
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1. An apparatus (1) for receiving a plurality of data 
packets and for routing the data packets in a data network, 
comprising: 

storing means (11) for storing a pre-defined list of 
rules for detecting special data packets; 

detecting means (12) for detecting special data 
packets in the received plurality of data packets on the 
basis of the pre-defined list of rules stored in said 
storing means ( 11 ) ; and 

routing means (13) for recjuesting instructions for the 
special data packets detected by said detecting means (12) 
and for routing the special data packets in accordance with 
instructions received on request, 

characterized by: 

an internal entity (14) for storing instructions for 
the special data packets, 

wherein said routing means (13) is arranged to notify 
said internal entity (14) of the detected special data 
packets and request instructions for the special data 
packets from said internal entity (14) , and 

wherein an external entity (2) is arranged to 
determine and update the instructions stored in said 
internal entity (14) during active operations, 

2. The apparatus according to claim 1, wherein said routing 
means (13) is arranged to notify the external entity (2) of 
the detected special data packets and request instructions 
for the special data packets from said external entity (2) . 
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3, The apparatus according to claim 1, wherein said 
external entity is arranged to determine and update the 
rules stored in said storing means (11) during active 
operations . 

4, The apparatus according to claim 1, wherein said routing 
means (13) is arranged to modify the special data packets 
in accordance with the received instructions. 

5, The apparatus according to claim 1, wherein said routing 
means (13) is arranged to communicate with an external 
charging entity (3) for charging the routing of the special 
data packets , 

6, A method for receiving a plurality of data packets and 
for routing the data packets in a data network, comprising 
the steps of: 

storing (SI) a pre-defined list of rules for detecting 
special data packets; 

detecting (S3) special data packets in the received 
plurality of data packets on the basis of the stored pre- 
defined list of rules; and 

requesting (S4) instructions for the detected special 
data packets and routing (S5) the special data packets in 
accordance with instructions received on request, 

characterized by the steps of: 

in the requesting step, notifying an internal entity 
(14) of the detected special data packets and requesting 
instructions for the special data packets from said 
internal entity (14) , 

wherein the instructions stored in said internal 
entity (14) are determined and updated by an external 
entity (2) during active operations. 
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7. The method according to claim 6, wherein said requesting 
step (S4) comprises the steps of: 

notifying said external entity (2) of the detected 
special data packets; and 

requesting instructions for the special data packets 
from said external entity (2) . 

8. The method according to claim 6, wherein the rules 
stored in said storing step are determined and updated by 
said external entity (2) during active operations. 

9. The method according to claim 6, wherein said routing 
step (35) comprises the step of: 

modifying the special data packets in accordance with 
the received instructions. 

10. The method according to claim 6, comprising the further 
step of: 

communicating with an external charging entity (3) for 
charging the routing of the special data packets . 

11. A data network system in which an apparatus according 
to any one of claims 1 to 5 is employed. 
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